Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$113к$150кмедиана$175к
50 в выборке
70
Хорошая вакансия
развернуть
В Company hidden четко описана старшая роль с серьезной ответственностью за реагирование на инциденты, но смены по выходным и праздникам могут осложнить баланс между работой и личной жизнью, а зарплата не указана.
Кликните для подробной информации
Сменный графикЗарплата не указанаСовременные инструментыПонятные задачиМасштабная команда
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Security Analyst (Cybersecurity): Investigating and responding to complex security incidents across endpoint, network, cloud, email, proxy, SIEM, and EDR environments with an accent on detection engineering, threat hunting, automation, and digital forensics. Focus on determining root cause and impact, building investigation tools and playbooks, and improving continuous 24x7 SOC operations.
Location: Sydney, Australia. hirify.global’s SOC operates 24x7; the role requires rotating days, including weekends and holidays, to ensure continuous coverage.
Company
hirify.global provides business and technology research and insights to enterprise leaders and operates globally across approximately 90 countries and territories.
What you will do
Independently investigate complex security incidents from triage through scoping, containment, remediation, and closure, escalating high-impact events when needed.
Correlate evidence across SIEM, EDR, cloud, email, proxy, network, and related telemetry to determine root cause, scope, impact, and remediation.
Produce investigation notes, incident reports, and actionable outcomes for technical teams and business stakeholders.
Develop and tune detection content, investigative workflows, and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain, and other relevant frameworks.
Build automation and practical tools, proactively hunt for malicious behavior and vulnerabilities, and identify control gaps, misconfigurations, and anomalous activity.
Act as an escalation point and mentor for other analysts while contributing to continuous improvement and global SOC maturity.
Requirements
Three to five years of experience in information security, security operations, incident response, or an equivalent hands-on role.
Proven experience triaging and investigating cybersecurity events and incidents, prioritizing effectively, and working confidently in time-sensitive environments.
Hands-on experience with SIEM or XDR, EDR, email security, web proxy, and digital forensics and incident response.
Experience investigating AWS, Azure, or GCP environments and working with SPL, KQL, SQL, or comparable query languages.
Practical threat-hunting experience and the ability to automate with Python, PowerShell, Bash, or similar technologies.
Strong written and verbal communication, documentation, and stakeholder engagement skills, including the ability to explain technical issues clearly and support other analysts.
Curiosity, continuous learning, and a record of improving tools, processes, and team capability.
A bachelor’s degree in cybersecurity, computer science, engineering, or equivalent practical experience is preferred.
Nice to have
Red-team or purple-team exposure.
Certifications such as GCIH, GCFA, or comparable credentials.
Culture & Benefits
Inclusive, security-first environment with knowledge sharing, thoughtful challenge, and collaboration across global teams.
Opportunity to strengthen the maturity of a global SOC and take ownership of complex technical investigations.
Work across diverse technologies and environments with supporting tools and investment.
Autonomy to improve tools, processes, and operational practices with support from a global team.
Hybrid work environment with flexibility to work virtually when productive and collaborate in person when needed.
World-class benefits and competitive compensation.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →